ci: verify, Trivy scan, and semantic release pipeline
CI & Release / Verify simulator (push) Successful in 16s
CI & Release / Trivy scan (push) Failing after 1s
CI & Release / Semantic Release (push) Has been skipped

Gitea Actions: compile check, virtual-drone smoke flight validated with
DuckDB, read-only SQL gate tests, Trivy vuln and misconfig scans. Pushes
to main cut a semantic version from the conventional-commit type and
publish a release with a fleet release manifest and source bundle.
This commit is contained in:
2026-07-08 13:54:06 +01:00
parent a07460b2af
commit 4ab5ab0153
2 changed files with 196 additions and 0 deletions
+4
View File
@@ -50,3 +50,7 @@ cd simulator && DRONE_COUNT=10 docker compose up
# Run the visualization
cd prototype && npm install && npm run dev
```
## CI & releases
Every push runs the pipeline in [`.github/workflows/release.yaml`](.github/workflows/release.yaml): a compile check, a 10-second virtual smoke flight verified with DuckDB, unit tests for the read-only SQL gate, and a Trivy vulnerability/misconfiguration scan. Pushes to `main` then cut a semantic version from the conventional-commit type (`feat:` → minor, `!`/`BREAKING CHANGE` → major, else patch), tag the commit, and publish a release with a **fleet release manifest** (versioned artifact list with checksums — the delivery unit described in [11 — CI/CD & delivery](docs/11-cicd-delivery.md)) plus a source bundle.